updating bucket to use kms

fortunecookiezen · Oct 13, 2021 · 82024c6 · 82024c6
1 parent 1c942d0
commit 82024c6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -6,7 +6,8 @@ resource "aws_s3_bucket" "terraform-backend" {
   server_side_encryption_configuration {
     rule {
       apply_server_side_encryption_by_default {
-        sse_algorithm = "AES256"
+        sse_algorithm     = "aws:kms"
+        kms_master_key_id = aws_kms_key.tf-state-key.id
       }
     }
   }